Tracking this scam experience, several details gradually emerged.

**Malware is the Breakthrough Point**

The reason hackers could infiltrate the device lies in a Trojan hidden within a certain software I downloaded. This is the most direct intrusion method—once the Trojan is embedded in the system, the attacker gains the initiative.

**Why a Specific Wallet Was Targeted**

They chose the wallet that has been kept open on the webpage and logged in for a long time. This is a critical vulnerability—being logged in means private key operations do not require re-authentication, giving hackers a direct transfer opportunity.

In contrast, other wallets remained locked at all times. Since hackers did not have the password, they ultimately had to give up. This password defense line indeed played a role.

**Reflection**: Long-term login status + malware = high-risk combination. Regularly logging out, downloading cautiously, separating hot and cold wallets—these basic protective measures are now clearly important.